Overview

overview

10

Static

static

10

RIP_YOUR_PC_LOL.exe

windows10-2004-x64

10

Resubmissions

15-04-2023 18:24

230415-w2c15sfb37 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RIP_YOUR_PC_LOL.bin.zip

  • Size

    18.5MB

  • MD5

    583d5445a319588293538aa4d22cfc89

  • SHA1

    40116403164ff48921603e77db604036cb52eddc

  • SHA256

    a20103b2cca0ba56f3eb33cc6adcc4bbcbe2d3a1d7fb9627e5c72fae70ef3458

  • SHA512

    fdfdb0fc27687a1a7b05392e88539ed1c6cf3a9cb30a0c6c2301b573c70e90b5f8776ed1ed2848cee691da6473effafb5932d6043ea3f2e4c284505463cff89e

  • SSDEEP

    393216:FG1RKwIwlCxqWsVO+zND8jy64eAglTjLeb/q9A80FUFjE:Y1038WsVOyGjt4eAglTj6i9iFUxE

Score
10/10
ratasyncratblackmoonnanocorenjrat

Malware Config

Signatures

  • Async RAT payload 1 IoCs
    rat
  • Asyncrat family
    asyncrat
  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 1 IoCs
  • Nanocore family
    nanocore
  • Nirsoft 1 IoCs
  • Njrat family
    njrat
  • NirSoft MailPassView 1 IoCs

    Password recovery tool for various email clients

  • NirSoft WebBrowserPassView 1 IoCs

    Password recovery tool for various web browsers

Files

  • RIP_YOUR_PC_LOL.bin.zip
    .zip

    Password: infected

  • RIP_YOUR_PC_LOL.bin
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections